PT-2022-7227 · Microsoft · Windows Local Session Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Local Session Manager LSM affected versions not specified Description: The issue exists due to insufficient input validation in the Windows Local Session Manager component. Exploitation of this issue may allow a remote attacker to cau...

PT-2022-36813 · Git +1 · Wabt

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash has been reported with an unknown write type. The crash involves the std:: 1::allocator traits and std:: 1::vector functions, specifically with...

PT-2022-17474 · Qualcomm · Snapdragon Auto +5

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to memory corruption in the camera due to improper validation of an array index. This affects various Qualcomm Snapdragon products, including...

PT-2022-36812 · Hunspell · Hunspell

Name of the Vulnerable Software and Affected Versions: Hunspell affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details about the crash include the AffixMgr::cpdcase check and AffixMgr::compound check functions, as well as the...

PT-2022-6008 · Microsoft · Windows Fax Compose Form +1

Name of the Vulnerable Software and Affected Versions: Windows Fax Compose Form affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Fax Compose Form component, allowing an attacker to potentially elevate their privileges. There is n...

PT-2022-5889 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Graphics Component, which can be exploited to elevate privileges. This allows an attacker to affec...

PT-2022-27722 · Aerocms · Aerocms

Name of the Vulnerable Software and Affected Versions: AeroCMS version 0.0.1 Description: The issue concerns the approve parameter in the AeroCMS CMS system, which is susceptible to SQL injection attacks. This allows attackers to potentially execute malicious SQL code. Recommendations: For AeroCM...

PT-2022-17460 · Qualcomm · Snapdragon Auto +4

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to possible memory corruption in the kernel while performing memory access. This occurs due to the hypervisor not correctly invalidating the processor...

PT-2022-37585 · Mageia · Rootcerts

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue involves setting certain parameters, specifically CKA NSS SERVER DISTRUST AFTER and CKA NSS EMAIL DISTRUST AFTER, related to 3 TrustCor Root Certificates. Recommendations: At...

PT-2022-17464 · Qualcomm · Qualcomm Snapdragon Mobile

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Mobile affected versions not specified Description: The issue is related to a denial of service in the Modem component due to a reachable assertion. Recommendations: At the moment, there is no information about a newer...

PT-2022-5887 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Print Spooler, allowing an attacker to elevate their privileges. This can impact the system, potentiall...

PT-2022-5859 · Microsoft · Windows Bluetooth Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bluetooth Driver affected versions not specified Description: The issue is related to insufficient access control in the Windows Bluetooth Driver, which can be exploited to elevate privileges. This allows an attacker to affect the...

PT-2022-6013 · Microsoft · Azure Network Watcher Vm Agent

Name of the Vulnerable Software and Affected Versions: Azure Network Watcher Agent affected versions not specified Description: The issue is related to authorization errors in the Azure Network Watcher Agent service, which can be exploited to bypass existing security restrictions. Recommendations...

PT-2022-5883 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insufficient access control in the Windows Print Spooler, which can be exploited to elevate privileges. This allows an attacker to affect the system. N...

PT-2022-20894 · Vmware · Vcenter Server +1

Name of the Vulnerable Software and Affected Versions: vCenter Server affected versions not specified Description: The vCenter Server contains an information disclosure issue due to the logging of credentials in plaintext. A malicious actor with access to a workstation that invoked a vCenter Serv...

PT-2022-16709 · Microsoft · Outlook For Android

Name of the Vulnerable Software and Affected Versions: Outlook for Android affected versions not specified Description: The issue is related to an Elevation of Privilege Vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or details...

PT-2022-27452 · Linx · Linx Sphere Linx

Name of the Vulnerable Software and Affected Versions: Linx Sphere LINX version 7.35.ST15 Description: A directory traversal issue in the SCS.Web.Server.SPI/1.0 component allows attackers to read arbitrary files. Recommendations: For Linx Sphere LINX version 7.35.ST15, at the moment, there is no...

PT-2022-27714 · Tenda · Tenda W20E

Name of the Vulnerable Software and Affected Versions: Tenda W20E version 16.01.0.63392 Description: The issue is related to a Buffer Overflow. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this...

PT-2022-27636 · Sens · Sens

Name of the Vulnerable Software and Affected Versions: SENS version 1.0 Description: The issue is related to Cross Site Scripting XSS. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...

PT-2022-27407 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, as it mentions that the CVE is not valid and refers to reading via the Nation...